git-history-investigation
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to ingest and process data from external, potentially untrusted sources which could contain hidden instructions targeting the LLM.
- Ingestion points: The agent is instructed to read commit messages using
git show, search history viagit log, and fetch pull request or issue tracker content using host-specific APIs or CLIs (referenced inreferences/current-guidance.md). - Boundary markers: The skill does not define specific delimiters or instructions to treat the fetched content strictly as data, increasing the risk that the model might follow instructions embedded in a malicious commit or PR description.
- Capability inventory: The skill environment allows for shell command execution (Git and PR CLIs).
- Sanitization: No sanitization or escaping mechanisms are specified for the data retrieved from the Git history or external trackers.
Audit Metadata